Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/aef64367d4e08fba1b404bd293ceaf8ce004be1e.roa
File:                     aef64367d4e08fba1b404bd293ceaf8ce004be1e.roa (raw, json)
Hash identifier:          k5uIJntECvKSFeIcliPvF1/uytt5msmNWQIk70dhHow=
Subject key identifier:   55:A0:43:76:51:DF:B0:D8:0E:53:F4:CD:97:C4:22:7A:A4:5E:F5:3B
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       17D039
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/aef64367d4e08fba1b404bd293ceaf8ce004be1e.roa
Signing time:             Thu 29 Sep 2022 18:02:08 +0000
ROA not before:           Thu 29 Sep 2022 18:01:21 +0000
ROA not after:            Sun 29 Sep 2024 18:01:21 +0000
asID:                     18734
IP address blocks:        201.148.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1560633 (0x17d039)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Sep 29 18:01:21 2022 GMT
            Not After : Sep 29 18:01:21 2024 GMT
        Subject: CN=aef64367d4e08fba1b404bd293ceaf8ce004be1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4f:16:82:92:5d:a3:89:e1:11:a6:c0:40:18:
                    66:ae:17:6f:13:d4:6e:66:21:78:2e:25:bb:90:57:
                    c7:00:15:e0:19:18:92:de:a7:13:12:df:43:0b:5f:
                    b7:3b:b5:43:a3:a4:07:5c:f9:49:48:8c:0e:6e:c5:
                    2c:20:2c:89:ee:0b:ef:5a:57:8d:c2:b1:1e:be:89:
                    83:c7:63:0b:be:c1:93:ee:31:b0:34:9b:e9:1e:a8:
                    72:41:77:fa:4a:1c:d8:fa:4d:9e:7d:35:70:4e:34:
                    03:7f:b8:89:12:cb:cd:2a:f9:d0:36:a4:47:86:40:
                    c2:5e:eb:72:c0:d3:08:17:44:8c:b1:a7:74:2d:93:
                    46:b8:bf:51:f4:47:0a:6e:d1:57:3e:ca:b7:e7:1c:
                    fb:ab:01:f6:b6:5f:f8:ff:0c:e6:5f:67:cd:ce:b4:
                    7e:12:3e:92:bf:25:47:10:e2:ca:da:b7:9a:d9:14:
                    51:4c:f4:8f:c1:38:87:64:60:cc:79:fa:77:23:43:
                    a8:26:72:91:8c:29:10:ca:cc:dc:bb:81:99:61:65:
                    68:cf:a9:ba:13:55:02:7e:c1:bf:61:f8:c7:cf:2e:
                    22:9e:8c:53:1e:0b:6d:e9:53:60:6d:34:e0:c1:87:
                    3e:82:eb:88:42:93:39:ea:76:74:c2:ab:ce:c2:36:
                    da:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A0:43:76:51:DF:B0:D8:0E:53:F4:CD:97:C4:22:7A:A4:5E:F5:3B
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/aef64367d4e08fba1b404bd293ceaf8ce004be1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:a4:ae:8a:42:b4:3a:4f:49:e9:28:88:cd:be:81:cb:fc:aa:
         9d:c0:33:5a:0d:ec:97:9b:65:58:11:a1:bd:cf:8f:8a:73:59:
         20:ec:63:28:fa:62:38:d5:ff:87:3a:ca:17:cc:16:ac:f4:11:
         94:5b:ce:1b:9e:12:31:d4:ff:70:4e:09:c9:23:e2:2c:74:4d:
         f3:f2:b7:3a:a5:0f:ca:bc:f3:6c:52:05:2b:48:8c:23:a6:60:
         72:8b:40:4e:19:1a:71:cc:5e:d7:50:aa:3f:b7:c7:77:40:4e:
         1d:d4:12:35:1f:44:8d:98:4b:d3:71:af:42:be:cc:29:8d:43:
         9d:61:cf:ce:e8:c3:79:39:d7:f1:54:11:76:86:43:9d:e9:42:
         8a:47:a7:8d:41:46:4a:31:fe:09:a0:2b:dc:df:de:d3:ab:56:
         af:06:29:c9:8a:ab:ad:5f:0b:cf:0f:07:96:1e:41:02:3b:7c:
         aa:df:c7:b1:e4:6d:1b:70:35:18:83:4e:36:b6:66:96:d4:07:
         06:0b:09:eb:4e:ee:64:e6:f6:5b:9d:45:d3:85:cc:b4:9c:57:
         21:f3:c5:cf:c1:b1:19:ac:3e:5d:75:23:0a:2f:b9:b6:49:45:
         90:76:a1:34:07:07:2f:29:55:f5:a7:17:7f:65:9a:1e:16:bf:
         39:58:db:4c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDF9A5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk3
ODNhYzliYWQyYjdiOTIyZjY0OGM5MGU4ODFiZjQ0OTc4MDY5YWQwHhcNMjIwOTI5
MTgwMTIxWhcNMjQwOTI5MTgwMTIxWjAzMTEwLwYDVQQDEyhhZWY2NDM2N2Q0ZTA4
ZmJhMWI0MDRiZDI5M2NlYWY4Y2UwMDRiZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh08WgpJdo4nhEabAQBhmrhdvE9RuZiF4LiW7kFfHABXgGRiS
3qcTEt9DC1+3O7VDo6QHXPlJSIwObsUsICyJ7gvvWleNwrEevomDx2MLvsGT7jGw
NJvpHqhyQXf6ShzY+k2efTVwTjQDf7iJEsvNKvnQNqRHhkDCXutywNMIF0SMsad0
LZNGuL9R9EcKbtFXPsq35xz7qwH2tl/4/wzmX2fNzrR+Ej6SvyVHEOLK2rea2RRR
TPSPwTiHZGDMefp3I0OoJnKRjCkQyszcu4GZYWVoz6m6E1UCfsG/YfjHzy4inoxT
Hgtt6VNgbTTgwYc+guuIQpM56nZ0wqvOwjbadQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFWgQ3ZR37DYDlP0zZfEInqkXvU7MB8GA1UdIwQYMBaAFMqL6Qa6lrLFhJ+G
RkANLQxgDZdgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTc4M2Fj
OWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTBjNGI0YTAtNjQxNy00YTdjLTg3NTgtOWU2ZjRi
MGU5Njc5L2FlZjY0MzY3ZDRlMDhmYmExYjQwNGJkMjkzY2VhZjhjZTAwNGJlMWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMGM0YjRhMC02NDE3LTRhN2MtODc1OC05ZTZm
NGIwZTk2NzkvOTc4M2FjOWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMmUEDANBgkqhkiG9w0BAQsFAAOCAQEAh6SuikK0Ok9J6SiI
zb6By/yqncAzWg3sl5tlWBGhvc+PinNZIOxjKPpiONX/hzrKF8wWrPQRlFvOG54S
MdT/cE4JySPiLHRN8/K3OqUPyrzzbFIFK0iMI6ZgcotAThkaccxe11CqP7fHd0BO
HdQSNR9EjZhL03GvQr7MKY1DnWHPzujDeTnX8VQRdoZDnelCikenjUFGSjH+CaAr
3N/e06tWrwYpyYqrrV8Lzw8Hlh5BAjt8qt/HseRtG3A1GINONrZmltQHBgsJ607u
ZOb2W51F04XMtJxXIfPFz8GxGaw+XXUjCi+5tklFkHahNAcHLylV9acXf2WaHha/
OVjbTA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org